From 1b0247abc755375c8de7c913e433cfdc96f64e15 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 04:50:45 +0000 Subject: [PATCH 1/2] docs: sync unified enclave features and capped tool descriptions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Add unified enclaves to Feature highlights in README.md with mention of cost control via --max-num-tool-calls, repository seedling, and dynamic admission - Clarify that tool description text for capped limits must match exactly during readiness handshake in enclaves-architecture.md Addresses recent code changes: - Commit 0f185e349a038c4e76bfc2274d6078f6976263e1: match capped enclave tool descriptions during readiness (#10386) - Commit c915e89f470bba946b76c16203b6692c87b68208: preserve enclave gateway notification acknowledgments (#10383) Verified that: - Tool descriptions are correctly documented in awf-config-spec.md ยง14.2a - MCP notification acknowledgment handling is documented in INTEGRATION-TESTS.md - Release template remains consistent with current CLI features Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- README.md | 1 + docs/enclaves-architecture.md | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 8ebf6a08c..405deed1e 100644 --- a/README.md +++ b/README.md @@ -58,6 +58,7 @@ use `awf --reflect`. It prints the `/reflect` JSON response to stdout. - **Domain and URL controls**: allow/deny domain rules, SSL Bump (`--ssl-bump`), and URL patterns (`--allow-urls`, requires `--ssl-bump`) - **Data protection controls**: DLP scanning (`--enable-dlp`), DNS-over-HTTPS, and agent runtime limits (`--agent-timeout`) - **API proxy capabilities**: OpenAI, Anthropic, Copilot, Gemini, and Google Vertex AI targets with rate limits, token steering, Anthropic auto-cache, and `apiProxy.hostedWeb.{claude,codex}` domain policies +- **Unified enclaves**: isolated script and agent execution with cost control via `--max-num-tool-calls`, repository seedling, and dynamic admission - **Infrastructure flexibility**: upstream proxy chaining, host service access, Docker-in-Docker, custom mounts, memory limits, and TTY mode - **Protected output capture**: opt-in, host-only command stdout/stderr capture with attempt and completeness metadata - **Operational tooling**: pre-download images and inspect logs/stats/summaries/audits from live or saved runs diff --git a/docs/enclaves-architecture.md b/docs/enclaves-architecture.md index c08a0d17f..5546becf7 100644 --- a/docs/enclaves-architecture.md +++ b/docs/enclaves-architecture.md @@ -493,10 +493,10 @@ gateway, and readiness errors never log response bodies, headers, or capabilities. The exact routed tool contract includes the broker's advisory for the configured -`--max-num-tool-calls` limit, when present. Readiness derives that sentence from -the same formatter as the broker; it does not strip descriptions or accept a -different limit. Tool names, enabled executor set, schemas, gateway origin -prefix, and all other description text must still match exactly. +`--max-num-tool-calls` limit, when present. Readiness derives that capped-limit +sentence from the same formatter as the broker; it does not strip descriptions +or accept a different limit. Tool names, enabled executor set, schemas, gateway +origin prefix, and all other description text must still match exactly. Host startup diagnostics track whether this actual readiness handshake was never attempted, attempted, or completed; they do not infer it from broker From b1505da46ae9dacb4f4948a1616e13644b198dba Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 21 Oct 2026 14:38:57 +0000 Subject: [PATCH 2/2] docs: use repository seeding terminology Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 405deed1e..2dc8e6ae1 100644 --- a/README.md +++ b/README.md @@ -58,7 +58,7 @@ use `awf --reflect`. It prints the `/reflect` JSON response to stdout. - **Domain and URL controls**: allow/deny domain rules, SSL Bump (`--ssl-bump`), and URL patterns (`--allow-urls`, requires `--ssl-bump`) - **Data protection controls**: DLP scanning (`--enable-dlp`), DNS-over-HTTPS, and agent runtime limits (`--agent-timeout`) - **API proxy capabilities**: OpenAI, Anthropic, Copilot, Gemini, and Google Vertex AI targets with rate limits, token steering, Anthropic auto-cache, and `apiProxy.hostedWeb.{claude,codex}` domain policies -- **Unified enclaves**: isolated script and agent execution with cost control via `--max-num-tool-calls`, repository seedling, and dynamic admission +- **Unified enclaves**: isolated script and agent execution with cost control via `--max-num-tool-calls`, repository seeding, and dynamic admission - **Infrastructure flexibility**: upstream proxy chaining, host service access, Docker-in-Docker, custom mounts, memory limits, and TTY mode - **Protected output capture**: opt-in, host-only command stdout/stderr capture with attempt and completeness metadata - **Operational tooling**: pre-download images and inspect logs/stats/summaries/audits from live or saved runs